Privacy statement

1. Preliminary note

The following sections will provide you with information regarding your data. The legislator has declared which data is relevant to you for this purpose.

You can find more information in the General Data Protection Regulation in Sections 12 to 22 and 34. The contents of the General Data Protection Regulation can be found online at gdpr-info.eu. Please contact the data protection officer and/or administration if you have questions regarding the General Data Protection Regulation.

2. What is personal data?

All data that refers to a certain or specifiable person. A person is specifiable if he or she can be determined directly or indirectly. This may occur, for instance, by allocation to a name, an identifier, site data, an online identifier or one or several characteristics.

4.5 Who can obtain my data?

Persons outside your company who are involved directly with data processing

Service providers who are contractually bound to maintain confidentiality and who perform partial data processing work.

External companies, if required. Such examples are postal couriers who deliver letters

4.6 Will my data be transferred to countries outside the European Union?

We are not planning any such activity.

4.7 How long will you store my data?

We will store your data for the period required to achieve the purposes described above in section 4.1. However, there are statutory regulations (e.g. §147 of the General Tax Code) that require us to store certain documents for six or ten years. We will delete no longer required data after the statutory storage term has expired.

4.8 Do I have to make my data available?

You need to give us your data so we can achieve the reasons stated in section 4.1.

This is necessary and also required by law in order to enter into and execute a contract with you. If you do not provide the data we cannot enter into agreement with you.

In the event of a complaint please contact the responsible supervisory body. The supervisory body stated in section 3.3. is the responsible body for our company.

You have the right to have a court verify this, subject to Art. 78 of the GDPR, against the supervisory body, and subject to Art. 79 GPDR, against our company.

4.9 Automated decision-making/profiling

We do not employ automated decision-making.

5. What rights do I have?

5.1 Information regarding your rights

As a person affected by data processing you have the following rights subject to the General Data Protection Regulation, among others (hereinafter also called "affected rights"):

5.2 Right of access (subject to Art. 15 GDPR)

You have the right to request information as to whether we process personal data concerning you or not. If we process your personal data you have the right to know,

Why we are processing your data (also see item 4.1);

What type of your data we process;

What types of recipients receive or should receive your data (also see item 4.3);

For how long we will store your data; if you cannot give any details regarding the storage term we have to inform you how we determine the storage time (e. g. after the statutory storage times have expired) (see also item 4.7);

That you have a right to correction or deleting the corresponding data including the right to restricting the processing and/or the possibility to object (see also the following items 5.2, 5.3 and following);

That you have a right to issue a complaint to a supervisory body;

Where your data comes from if we do not record it directly from you;

Whether your data is used for an automated decision and, if this is the case, to learn which logic this decision is based on and what may be the effects and the consequences of this automated decision for you;

That when data regarding you is transmitted to a country outside the European Union you have the right to be informed, whether and if yes based on which guarantees you can ensure an adequate level of protection at the recipient of the data;

That you have the right to request a copy of your personal data. Data copies are generally provided in electronic format. The first copy is free of charge, a reasonable fee may be requested for further copies. A copy may only be made available if it does not affect the rights of another person.

5.3 The right to correct the data (according to Art. 16 GDPR)

You have the right to request we correct your data if it is incorrect and/or incomplete. This right also includes the right to completion by a complementary declaration or notice. A correction and/or complement must occur without intentional delay.

5.4 Right to delete personal data (according to Art. 17 GDPR)

You have the right to request us to delete your personal data, if

The personal data is no longer required for the purpose for which it was recorded;

The data is processed based on a consent given by you and you have withdrawn such consent; this does not apply if another statutory permit for processing data exists;

You have objected against the data processing whereby the statutory approval is in the so-called "legitimate interest" (according to Art. 6. sub-section 1, letter e or f); it does not have to be deleted; however, if there are overriding, legitimate reasons for such processing;

You object against such data processing for the purpose of direct advertising;

Your personal data has been processed unlawfully;

It is the data of a child that has been recorded for information services (= electronic services) based on the approval (subject to Sec. 8, sub-section 1 GDPR).

There is no right to delete personal data, if

The right to freedom of expression and information contradicts the desire to delete;

Processing of personal data to fulfill a statutory obligation (e. g. statutory storage terms), to assume public duties and interests according to statutory law (also includes "public health") or where required for archiving and/or research purposes;

The personal data is required for enforcement, execution or defense of rights.

It must be deleted immediately (without willful delay). If we have made personal data available to the public (e. g. on the Internet), we shall undertake any technical and feasible means to ensure that other data processors are informed of the request to delete, including deleting of links, copies and/or replications.

5.5 Right to restricted data processing (subject to Section 18 GDPR)

You have the right to have restricted the processing of your personal data in the following cases:

If you have contested the correctness of your personal data you request that we do not use your data for a different purpose for the time while it is undergoing verification and therefore may restrict the processing.

In the event of unlawful data processing you may request that the data use be restricted instead of requesting the data be deleted;

If you require your personal data to enforce, execute or defend legal rights but we no longer require your personal data, you may request that we restrict the processing for the purpose of the legal claim;

If you have objected against the data processing (Art. 21 Sec. 1 GDPR) - cf. item 5.7 - and it has not yet been determined whether our interest in processing supersede your interest, you may require that your data is not used for other purposes for the duration of the test and its processing thus is not restricted.

Personal data where the processing has been restricted upon your request, may - subject to storage - may only be stored following

Your approval,

For enforcing, executing or defending your legal claims,

To protect the rights of other natural or legal persons, or

Are processed due to reasons of important public interest.

If a processing restriction is raised you will be informed beforehand.

5.6 The right to data transmitability (according to Sec. 20 GDPR)

You have the right to request from us the data you have provided be made available to you in electronic format (e. g. as a PDF or Excel document).

You may also request that this data be transmitted to another (specific) company insofar as this is technically possible for us.

The prerequisite that you have this right is that the data is processed based on an approval or to perform a contract (see section 4.2) and is performed using automated procedures.

The execution of the right to data transmission may not impair the rights and freedom of other persons.

If you use the right to data transmission you also have the right for your data to be deleted subject to Sec. 12 GDPR.

5.7 Right to objection against certain data processing (according to Section 21 of the GDPR)

If your data is processed for the purpose of assuming duties in the public interest or for assuming legitimate interests (see item 4.2) you may object to such processing. You must state us the reasons that result from your special situation for your objection. This may be, for instance, special family circumstances or protection-worthy confidentiality interests.

In case of an objection we shall refrain from any further processing of your data under the purposes stated in section 4.1, unless

There are important, protection-requiring reasons for processing, that supersede your interests, rights and liberties, and

The data is processed for the enforcement, execution or defense of rights.

You may object to the use of your data for the purpose of direct advertising at anytime; this shall also apply to profiling insofar as it is linked to direct advertising. In case of an objection we may no longer use your data for the purpose of direct advertising.

Decisions made by us that have legal consequences for you or may impair you considerably, may not be based exclusively on automated processing of personal data. This also includes profiling. This limitation shall not apply insofar as the automated decision

Is required in order to enter into a contract with you or to fulfil such contract,

Is permissible due to statutory regulations if these statutory regulations contain adequate measures to protect your rights and liberties as well as a legitimate interest, or

Are carried out following your explicit approval.

Decisions that are exclusively based on automated processing of special categories of personal data (=sensible data) are only permitted, if this occurs based on

Your explicit approval or

There is a considerable public interest in such processing

and adequate measures for the protection of your rights and liberties as well as legitimate interests have been taken.

5.9 Execution of the rights of those directly affected

To execute your affected persons rights please refer to section 3.2. Requests received electronically are usually replied in electronic format. The information, notifications and measures to be provided according to the GDPR including "the execution of the rights of those affected" are generally executed free-of-charge. Only in the event of obviously unjustified or excessive applications shall we be entitled to request payment of an adequate compensation or refrain from action (subject to Section 12, Sub-section 5 GDPR).

In the event that there is any doubt concerning your identity we may for identification purposes request additional information from you. If we cannot identify you we shall be entitled to refuse to process your request. We will inform you separately if possible regarding the possibility of a missing identification. (cf. Sections 12, sub-section 6 and Section 11 GDPR).

Requests for information and queries are usually processed immediately within one month of receipt. The deadline may be extended by further two months insofar as this is necessary, taking into account the complexity and/or number of requests; if the deadline is extended we will inform you within one month upon receipt of your request stating the reasons for the delay. If we do not undertake action in response to an application we will inform you immediately within one month of receipt of the application of the reasons and will tell you, how you may issue a complaint to a supervisory body or effect legal support. (cf. Sections 12, sub-section 6 and Section 11 GDPR).

Please note that you may only execute your rights of affected persons within the context of the union or member state restrictions and limitations. (Section 23 GDPR)

6. Use of Matomo

This website uses the web analysis tool (www.matomo.org), a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, ("Mataomo") to collect and store data based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes subject to Section 6 Sub-section 1 lit. f GDPR. This data may be used to create and evaluate anonymized user profiles. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of the Internet browser of the page visitor. The cookies enable the Internet browser to be recognized. The data obtained using the Matamo technology (including your anonymized IP address) is stored on our servers. . The data created by the cookie in the anonymized user profile is not used to personally identify the visitor of this website and is not combined with the personal data of the owner of the nickname. If you do not approve of the evaluation and storing of this data from your visit you may object to the storage and usage anytime by a mouse-click. In this case your browser will deploy a so-called opt-out cookie, which effects that Matamo will no longer store the session data. Please note that deleting all cookies also causes the opt-out cookie to be deleted. You may have to reactivate it.